First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

ping requests not shown (if not sent) to non existent devices

  • retag add tags

If from 192.168.1.23 I ping 192.168.1.1 (the router) Wireshark shows both the request and the reply. If I ping 192.168.1.2 (unassigned address) I expected to see the request but none is shown.

macOS Catalina 10.15.3 Please explain. Thank you

DG12's avatar
1
DG12
asked 2020-01-27 00:13:37 +0000, updated 2020-01-28 21:42:28 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

1

Assuming that .2 is on the same subnet as .1 and .23, there should have been an ARP request for 192.168.1.2. If the device doesn't exist then there will not be an ARP response. If there is no entry for .2 in the ARP table then the ICMP request (ping) is not possible.

Chuckc's avatar
3k
Chuckc
answered 2020-01-27 00:50:23 +0000
edit flag offensive 0 remove flag delete link

Comments

Thanks. In other words: Devices that do not exist in a LAN, are not in ARP tables so pinging an IP address does not transmit.

ping (on macOS) stupidly (?) says "Request timeout for icmp_seq ."

on linux "Destination Host Unreachable" is slightly better

I changed the subject, hope that's OK

DG12's avatar DG12 (2020-01-28 21:41:24 +0000) edit

An alternative case is if the device you are pinging is NOT on the same subnet, i.e. needs to be routed, and is not present. In this case, you will see the ping request go out with no response if routing is setup correctly, which matches your original expectation. The way I look at: the stack needs a MAC address to build the frame; if the destination host is local, then arp will not complete so no MAC address is available, so the stack cannot put the frame on the wire (this is your sample case here, as already described in the answer). Conversely, if we need to route, the stack does have the destination MAC address: not of the target host, but of the next hop gateway (router). So the stack has what it needs to put the frame on the wire, and you would then see it.

Bob Jones's avatar Bob Jones (2020-01-29 12:07:18 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer